TLDR
Cross-chain DeFi protocol NEAR Intents halted services after an exploit drained about $3.8 million via a bug in its deposit and withdrawal infrastructure.
- NEAR Intents was hacked for roughly $3.8 million due to a smart contract interaction bug with its Omni deposit and withdrawal system.
- The team paused services across 11 networks, patched the vulnerability and pledged full reimbursement while law enforcement and security firms trace funds sent to KuCoin and bridged to Bitcoin.
- The incident highlights growing integration risk in cross-chain DeFi, especially coming days after NEAR Intents helped block funds in the large Bitget exchange hack.
Deep Dive
1. What Happened In The Exploit
NEAR Intents, a protocol that lets users swap crypto across blockchains, reported a security incident in which about $3.8 million was stolen after a bug in how its Omni deposit and withdrawal infrastructure interacted with its smart contract was exploited. Multiple reports say the contract-side vulnerability has now been patched and the protocol has promised to reimburse affected users in full, with a detailed post?mortem to be released in the coming days. Investigators, including ZachXBT, noted irregular outflows from a BNB Chain hot wallet, with the stolen funds moving to KuCoin and then being bridged into Bitcoin, making recovery more complex but traceable on chain.
This was not a chain-level failure of NEAR Protocol (NEAR) itself, but a critical bug in the cross-chain routing layer that held user funds across multiple networks.
2. Service Halt, Impact And Compensation
Following the exploit, NEAR Intents halted core services and temporarily disabled deposits and withdrawals on 11 networks including BNB Chain, Polygon, ethereum/">Optimism, TON and Avalanche, while Near.com and basic functionality were expected to resume relatively quickly according to updates from outlets such as The Block. The team has stated that affected funds will be compensated in full, drawing on treasury resources, and has reported the incident to law enforcement while working with security and blockchain analytics firms to trace flows that went through KuCoin into Bitcoin. For now, some users with assets routed through NEAR Intents middle layer remain temporarily unable to move those specific positions on the affected networks until all infrastructure repairs are complete.
If you use NEAR Intents or similar cross-chain routers, your immediate risk is service disruption rather than total loss, but reimbursement depends on the projects treasury strength and follow?through.
3. Wider Cross-Chain DeFi Risk Context
This exploit lands in a broader pattern of large hacks and integration failures across crypto, with NEAR Intents itself having just helped block about $50 million in suspicious flows tied to the recent Bitget exchange breach days earlier, as noted by Cointelegraph. Cross-chain systems pool liquidity and route swaps across dozens of chains, which makes them powerful but also high?value targets: a single bug in the intent or routing layer can expose funds spread across many networks. Opinion among analysts is that users should pay close attention to how these protocols architect custody, hot wallets and third?party integrations such as Omni, and to whether they publish transparent audits and rapid, detailed incident reports after failures.
Cross-chain routers increase convenience and capital efficiency, but they also concentrate technical risk; monitoring their security practices and incident responses is becoming as important as watching any single chain.
Conclusion
The NEAR Intents exploit shows how a relatively small bug in cross-chain infrastructure can cascade into a multi?network outage and multi?million?dollar loss, even when the underlying L1 remains intact. For crypto users, the key takeaway is that cross-chain DeFi introduces an additional layer of risk on top of individual chains, making protocol architecture, audit quality and response speed critical signals to track alongside price and yields.
CoinsKid.Com